[liberationtech] OkayFreedom

[Jacob Appelbaum]

Amin Sabeti:
> Thanks Jake. I liked the analysis. I'll post about it in Farsi based on all
> discussions around this VPN.
> 

Oh boy. I guess feel free to share it but perhaps promoting positive
examples is a much better idea? There are too many shitty things that no
one will have time to audit - lack of an audit is not an endorsement and
it certainly doesn't mean it is safe by default...

My suggestion is to say that it is better to use Riseup.net's VPN or
another VPN service run by people you trust - using standard protocols
that aren't terrible is a much better idea. Do not use PPTP. Do consider
IPSEC + Certificates as an OK VPN type. However, what is most important
is that it is run by people you trust - OpenVPN is probably OK, I guess
but boy, I'm skeptical.

All the best,
Jacob


> A
> 
> On 28 October 2012 00:12, Jacob Appelbaum <jacob at appelbaum.net> wrote:
> 
>> Nadim Kobeissi:
>>> Nice analysis.
>>
>> These are just data points that clearly have no meaning. None at all.
>> Why, if only a bug would tell me that it was exploitable, I still
>> wouldn't believe it! Why are you convinced?!
>>
>>> Pursuant to this, I think downgrading this project from
>>> OkayFreedom to MehFreedom would be more suitable.
>>
>> I'm just not sure - I mean, we have no evidence that computers or
>> software used for security by high risk activists has ever been
>> compromised. I think you're really jumping the gun by downgrading from
>> Okay to Meh. So paranoid. Please Nadim, try to be serious. Next you'll
>> mention JavaScript crypto and tell me that even *you* have concerns!
>>
>> (* I mean, really, I hope you're laughing now because everything above
>> this part of the email is parody, a joke, a sad sad but oh so true joke. *)
>>
>> Sarcastically but without a hint of bitterness,
>> Jake
>>
>> --
>> Unsubscribe, change to digest, or change password at:
>> https://mailman.stanford.edu/mailman/listinfo/liberationtech
>>
> 
> 
> 
> --
> Unsubscribe, change to digest, or change password at: https://mailman.stanford.edu/mailman/listinfo/liberationtech
>